Veille CVE

Semaine du 10 novembre au 16 novembre 2025

5 CVE

Critique 2 Élevée 1 Moyenne 0 Faible 0 Non évaluée 2 Tri : plus récentes
  1. CVE-2025-64446 – Non évaluée Exploitée

    Fortinet FortiWeb

    Fortinet FortiWeb Path Traversal Vulnerability — Fortinet FortiWeb contains a relative path traversal vulnerability that may allow an unauthenticated attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.

  2. CVE-2025-62215 7.0 Élevée Exploitée

    Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 version 22H3

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

  3. CVE-2025-12480 9.1 Critique Exploitée

    TrioFox · Gladinet triofox

    Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete.

  4. CVE-2025-9242 9.8 Critique Exploitée

    WatchGuard Fireware OS · Watchguard fireware

    An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer. If the Firebox was previously configured with the mobile user VPN with IKEv2 or a branch office VPN using IKEv2 to a dynamic gateway peer, and both of those configurations have since been deleted, that Firebox may still be vulnerable if a branch office VPN to a static gateway peer is still configured.

  5. CVE-2025-21042 – Non évaluée Exploitée

    Samsung Mobile Devices

    Samsung Mobile Devices Out-of-Bounds Write Vulnerability — Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so. This vulnerability could allow remote attackers to execute arbitrary code.